Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baaaedf5-8075-3f86-82fd-f59c5be079fa.roa
File:                     baaaedf5-8075-3f86-82fd-f59c5be079fa.roa (raw, json)
Hash identifier:          Fe1Ucoli+IAVipm4vdFWtHuhe18fDSzjzfWeAsaRoLA=
Subject key identifier:   52:AE:95:78:58:D5:2F:14:8F:B8:1C:1D:2B:12:D8:8E:5A:9F:AA:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA5AA81005F67673642EC2A88
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baaaedf5-8075-3f86-82fd-f59c5be079fa.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     396541
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:81:00:5f:67:67:36:42:ec:2a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=19ff5eae-740b-4711-8be9-b759752cdfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:cd:1d:a5:b8:36:b9:6d:91:72:41:16:ee:
                    48:d8:5e:89:2b:c8:d5:b7:20:82:2c:0c:47:47:e0:
                    da:c5:57:b1:0e:1a:88:f1:39:a2:0e:97:84:22:1a:
                    9f:01:21:2d:79:e1:f4:48:19:0d:ef:1f:2a:96:04:
                    02:ba:be:25:a5:58:d1:9e:b2:bc:db:13:98:73:ec:
                    c2:df:e9:6d:e1:b3:9d:9b:d0:58:0a:c3:5c:48:b6:
                    c2:72:a3:ee:3c:1b:67:96:74:89:c5:b6:d7:61:01:
                    af:53:25:bc:22:6b:53:ce:9b:f9:98:9e:7d:63:f0:
                    51:a6:72:28:79:49:b7:3b:35:11:e1:39:c7:f1:f6:
                    ec:28:8a:f9:c0:d7:fe:c4:cf:80:6b:e4:02:97:cf:
                    e9:0a:81:51:fa:f5:5d:ea:f8:1b:eb:4d:47:e1:9b:
                    7c:1f:7b:c9:12:a7:87:db:1f:b8:42:18:64:61:57:
                    a0:66:01:a0:b0:62:01:18:67:7d:e9:a6:ce:eb:9d:
                    1b:9a:ec:43:88:53:3b:ed:f5:35:3f:28:49:ad:d9:
                    b7:ff:cf:1a:3f:8a:57:22:2b:dc:62:da:8f:dd:43:
                    90:6a:10:40:ba:02:ca:16:20:1f:ee:10:4c:4b:76:
                    1e:be:95:87:da:2d:e3:ca:d3:9b:d8:39:27:ea:4b:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:95:78:58:D5:2F:14:8F:B8:1C:1D:2B:12:D8:8E:5A:9F:AA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baaaedf5-8075-3f86-82fd-f59c5be079fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:b0:04:19:d2:9f:a8:c2:f9:13:fa:41:ee:e2:27:6c:bc:
         7a:d3:d2:06:ad:f8:66:8c:df:c2:7a:85:97:8a:00:66:9a:3d:
         5d:f0:b7:40:e9:c6:7e:16:ff:38:33:7c:42:8d:7f:af:20:0f:
         a7:e4:1f:82:df:10:31:ea:e3:37:fe:c2:28:18:db:02:2f:0e:
         a9:e5:db:5c:a8:8e:3c:f5:ec:89:8b:fd:0c:d5:03:d1:75:ce:
         96:d3:4d:dd:d7:44:7b:a0:9a:1c:e5:61:88:d9:cd:1a:bf:41:
         a9:d5:50:03:58:a3:ff:6f:48:13:df:13:70:e6:d6:c3:2d:85:
         38:a6:3c:d3:53:f5:44:72:1e:63:ed:53:c7:13:b3:0e:2d:f3:
         6f:88:e8:b7:4e:47:9b:0d:34:91:b5:1f:24:c5:db:ec:d7:92:
         93:a8:bd:8e:83:6a:02:1d:91:cf:60:ba:0b:35:fe:97:1d:4e:
         f8:47:17:f1:42:b8:e3:88:0a:f8:01:d8:ac:68:6c:49:66:09:
         04:33:59:e6:03:56:3e:47:cd:aa:60:75:bd:be:27:c3:9b:18:
         6a:06:8c:71:7f:b7:0d:cf:7c:3d:63:ac:01:b3:5d:84:ab:50:
         a1:1d:d7:54:27:1c:14:6b:0e:21:ff:3e:9c:e2:55:16:dd:71:
         91:8b:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:18:10 2026 by rpki-client